Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd0d610-724c-43c3-909c-f93494837923.roa
File:                     2cd0d610-724c-43c3-909c-f93494837923.roa (raw, json)
Hash identifier:          zgIdRLDQLv4/vtBmmD+dpU9SJH6DByYQbzNu+dtvzkE=
Subject key identifier:   C4:EE:AC:75:22:4F:45:F6:CF:48:DA:59:57:65:39:4E:A5:60:A6:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AD85F781E83DCC4C367E2289F56C8B789F008AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd0d610-724c-43c3-909c-f93494837923.roa
Signing time:             Mon 13 Oct 2025 15:52:34 +0000
ROA not before:           Mon 13 Oct 2025 15:52:34 +0000
ROA not after:            Mon 17 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d8:5f:78:1e:83:dc:c4:c3:67:e2:28:9f:56:c8:b7:89:f0:08:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 15:52:34 2025 GMT
            Not After : Nov 17 23:59:59 2025 GMT
        Subject: serialNumber=7f9897b00b8d51601b33a5b359985f56348807b43fea5ca0002ab6e0fdd5011f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:d0:56:7c:d2:8d:45:f5:ca:5f:82:91:cc:
                    53:c6:fc:bb:d6:f2:85:b1:ee:a5:42:30:c4:0b:54:
                    52:9f:a8:3c:0d:c3:d0:2c:d5:80:27:fa:08:1f:3b:
                    fc:9c:93:59:13:e4:4f:39:68:13:54:0b:fa:55:79:
                    77:b6:f7:e1:12:4a:d6:62:41:43:f2:e4:d0:7a:89:
                    14:34:34:63:60:a6:13:21:88:c9:d1:bd:0b:33:fe:
                    48:cb:b1:0e:17:7f:67:5d:46:dd:d1:5e:0e:49:c1:
                    41:de:ee:23:86:96:d5:54:ec:38:7f:e8:fb:bb:51:
                    1a:09:a0:ce:ec:0f:9d:1a:0f:d8:a2:d3:fd:e5:b5:
                    10:a2:50:b0:28:95:9c:84:d3:bc:8a:29:74:c3:ad:
                    a3:9a:79:61:41:ca:01:5b:d5:7a:15:49:30:d9:f8:
                    39:b8:c0:34:d1:fb:1a:29:be:68:e9:4b:e7:96:a1:
                    7d:8b:5f:58:82:41:d9:c2:e0:fb:74:cb:f5:89:39:
                    f9:dd:66:b0:b6:97:c4:70:a4:db:68:f1:49:88:d0:
                    70:b6:25:a8:a1:61:22:12:66:85:d9:e2:bd:70:80:
                    75:1f:f7:1e:16:0e:2d:4b:3d:b8:4c:46:fd:cc:2f:
                    79:a4:6d:69:59:27:11:9e:fb:34:86:f6:e3:29:22:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EE:AC:75:22:4F:45:F6:CF:48:DA:59:57:65:39:4E:A5:60:A6:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd0d610-724c-43c3-909c-f93494837923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1d:1e:e6:71:fc:dd:8a:90:a5:f3:01:da:d4:a1:f2:06:ac:
         ba:0d:16:ee:75:99:77:2d:07:e3:11:50:eb:91:35:69:25:f3:
         cd:3b:ae:30:77:64:00:69:6b:63:6e:64:ef:06:fc:33:5b:d2:
         9d:a5:56:44:ba:11:9f:a9:1f:97:ab:92:f9:f5:22:71:7a:6c:
         63:a6:3d:83:65:88:1b:18:a2:8a:88:8a:76:e8:a2:e8:55:53:
         67:ca:88:8f:77:46:b6:db:5e:52:e2:e5:bb:3d:f5:87:18:63:
         06:19:d8:d4:36:b5:03:77:e1:fa:00:48:c7:ed:a8:ba:e3:92:
         c4:6a:76:7f:96:fd:4b:f3:8c:57:99:5e:0c:02:ae:48:ff:35:
         19:18:3a:de:b6:aa:e3:83:23:f4:91:12:c9:7c:87:35:fa:67:
         2f:66:04:0b:7e:67:82:96:c7:ac:5a:46:cd:d1:9d:4c:ee:28:
         e6:00:12:88:4d:0c:85:a2:4a:e3:f5:48:85:2f:f0:aa:bf:78:
         72:04:e4:9e:d0:19:4e:c7:9c:d7:1b:0d:74:7e:08:4e:3e:ae:
         94:88:46:d2:77:81:12:e0:90:64:78:f3:91:83:f2:cd:0d:fa:
         ac:1c:ae:b5:7c:07:8a:95:22:08:3e:f5:ab:41:ce:37:32:e3:
         82:2a:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----